~ / search / GHSA-w3pw-qxjj-6prr

GHSA-w3pw-qxjj-6prr

Plone Authenticated Denial of Service vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-4188

Packages

EcosystemPackageAffectedFixed in
PyPI Plone >= 4.3, < 4.3.2 4.3.2
PyPI Plone >= 4.2, < 4.2.6 4.2.6
PyPI Plone >= 2.1, < 4.1.1 4.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to "retrieving information for certain resources."

References

External links from the advisory. They lead to third-party sites.